EFFECTIVE 22 JULY 2026
UpCost has no account, no server and no analytics. Nothing you do in the app is transmitted anywhere, because there is nowhere for it to go.
Nothing. No name, no email, no device identifier, no advertising ID. There is no sign-up because there is no account.
The app stores a small amount of data locally, in its own container on your device:
This never leaves the device. Deleting UpCost deletes all of it.
UpCost uses Apple's Screen Time framework (Family Controls). When you pick apps to lock, Apple does not tell UpCost which apps you picked. The app receives an opaque token it cannot read, decode or transmit. This is Apple's design, and it means your app choices are private even from us.
To count push-ups, squats and steps, UpCost reads the phone's proximity sensor and motion coprocessor while you are paying for an unlock. These readings are used in the moment to count repetitions and are never stored beyond the running total, and never transmitted. UpCost does not read Apple Health.
If you subscribe, the purchase is handled entirely by Apple through the App Store. UpCost never sees your card, your billing address or your Apple ID. The app only ever learns whether a valid subscription exists.
There are none. No analytics SDK, no crash reporter, no advertising network, no tracking of any kind. UpCost makes no network requests except those Apple's own App Store framework makes to verify a purchase.
UpCost is a self-control tool intended for the person holding the phone. It is not designed for children and collects no data from anyone, of any age.
Because UpCost holds no data about you on any server, there is nothing for us to export, correct or delete. Everything is on your device and under your control. Deleting the app removes it all, and iOS automatically lifts every block when it does.
If this policy ever changes, the effective date above changes with it. Material changes will be noted in the app's release notes.
Questions? Email joshfred@icloud.com and a real person will answer.